Archive — US — techcrunch
A surveillance vendor was caught exploiting a new SS7 attack to track people’sphone locations
Researchers discovered a surveillance vendor in the Middle East exploiting a new SS7 attack to track individuals' phone locations. This attack bypasses security measures set by telecommunication carriers, allowing the vendor to pinpoint users' positions with high accuracy. The exploit has been observed since late 2024, raising alarms about the increasing trend of malicious use of SS7 vulnerabilities for unauthorized surveillance.
Key points
- A surveillance vendor in the Middle East is exploiting a new SS7 attack.
- SS7 is a protocol used by global phone carriers to manage calls and messages.
- The attack tricks phone operators into disclosing subscriber locations.
- Enea, a cybersecurity firm, noticed the vendor's activities beginning in late 2024.
- The attack can approximate user locations to within a few hundred meters.
- Enea has alerted the affected phone operator but did not disclose the vendor's identity.
- Surveillance vendors typically work for government agencies, targeting individuals, including journalists and activists.
- Telecom companies have implemented some defenses, but effectiveness varies by carrier, leaving gaps in protection.
Why it matters
- This incident highlights ongoing vulnerabilities in SS7, exploited by various nations for surveillance.
- The evolution of surveillance technology raises concerns about privacy and civil liberties.
- Historically, countries like China, Iran, and Russia have been identified using SS7 for tracking U.S. citizens.
- The trend of increasing surveillance capabilities links to broader discussions on cybersecurity and individual rights.
This situation underscores the urgent need for improved SS7 security and regulatory frameworks to protect citizen privacy globally, amid rising incidents of state-sponsored surveillance.